Priority LOW 20
A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00421 · Published 2021-02-04 · No fix listed CWE-295
Priority MEDIUM 44
A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02227 · Published 2018-02-08 · No fix listed CWE-20
Priority MEDIUM 43
A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted de…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02297 · Published 2018-01-18 · No fix listed CWE-693
Priority LOW 26
Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00891 · Published 2017-11-30 · No fix listed CWE-79
Priority LOW 26
Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00891 · Published 2017-11-30 · No fix listed CWE-79
Priority LOW 29
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via a crafted value, ak…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01009 · Published 2016-05-21 · No fix listed CWE-79
Priority MEDIUM 46
Cisco Unified Computing System (UCS) Central Software 1.3(1b) and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0224 · Published 2016-04-14 · No fix listed CWE-78
Priority LOW 27
Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02049 · Published 2015-12-05 · No fix listed
Priority LOW 23
Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.3(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux3357…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0136 · Published 2015-12-05 · No fix listed CWE-79
Priority LOW 26
The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01729 · Published 2015-07-29 · No fix listed CWE-20
Priority MEDIUM 50
Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04482 · Published 2015-05-07 · No fix listed CWE-20
Priority LOW 30
Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128.
CVSS 2.0MEDIUM 6.8· Local · Low privileges · Interaction — · EPSS 0.00332 · Published 2014-02-22 · No fix listed CWE-20